f8e8356a3c9d891a5a5cceba8303f3af43d768d5bc4fc8b18c9288bf3e48902a | Triage

Sharing

General

Target

f8e8356a3c9d891a5a5cceba8303f3af43d768d5bc4fc8b18c9288bf3e48902a
Size

249KB
MD5

d18a39c3d43e2a9ad25436e11cde67c9
SHA1

a093e09b8089fb262a969d7bebe541fa99b660a0
SHA256

f8e8356a3c9d891a5a5cceba8303f3af43d768d5bc4fc8b18c9288bf3e48902a
SHA512

6853d2d983fc10c46c6610af77fb10d2931514b918cee0e65be724428076cef2e64e7d1d9399227666672ae780cdcfad7d61da06b8061e9843a6488d37147663
SSDEEP

6144:l+alBANQQDbQHKaM/ohBkNBR1WfYZXh/JAah78m0:cRxbQHGBv/ZXhxR78B

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f8e8356a3c9d891a5a5cceba8303f3af43d768d5bc4fc8b18c9288bf3e48902a
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ